The bill establishes a new section, 282.3187, in the Florida Statutes, focusing on the security of state information technology systems. It mandates that state agencies deploy cloud-native cybersecurity platforms as part of the state's cloud-first policy, which aims to transition agency applications and datasets into modern cloud environments. The bill outlines specific criteria that these platforms must meet, including providing unified visibility across multi-cloud and hybrid environments, enabling continuous posture management, supporting secure cloud application development, delivering real-time threat detection, and ensuring automated compliance monitoring.
Additionally, the bill requires the state chief information officer to provide a briefing to the appropriate legislative committees by October 1, 2026. This briefing will cover the state's progress in monitoring the security of various application environments, the identification of systemic risks and misconfigurations in cloud deployments, and the development of a future artificial intelligence security roadmap. The act is set to take effect on July 1, 2026.